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DETAILED ACTION 

1. Applicants amended claims 1, 3-5, 7-9, 19. 21, 31 and 61, added claims 
154-174. The pending claims are 1-174. Applicants* arguments with respect to claims 1- 
67 have been considered but are moot in view of the new ground(s) of rejection. 

Response to Arguments 

2. Applicants' arguments with respect to claims 68-97 have been fully 
considered but they are not persuasive. 

In response to applicant's argument that the references fail to show certain 
features of applicant's invention, it is noted that the features upon which applicant relies 
(i.e., as explained in the application (paragraph 0066 of the published application), such 
a challenge is useful, for example, in preventing access by a party that only has 
possession of the fingerprint...) are not recited in the rejected claim(s). Although the 
claims are interpreted in light of the specification, limitations from the specification are 
not read into the claims. See In re Van Geuns, 988 F.2d 1181, 26 USPQ2d 1057 (Fed. 
Cir. 1993). 

As argued by applicants in page 31 : 

Whiting does require that a user supply a password to access the data repository, but this does not 
amount to claim 68 's requirement that there be a challenge to ascertain that the user has the full data 
item. A user might well have a password but still attempt to access a data item without first having a 
complete copy. 

Examiner respectfully traverses because of the following reasons: 
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As claimed by applicant in claim 68 after the step of testing is the step of 
challenging a client that is attempting to deposit a data item already stored in the repository, to 
ascertain that the client has the full data item. 

As taught by Whiting, a User Account Database contains the list of user names, 
user directory names, user ID values, as well as encryption and password keys for each 
user. Most of the record associated with each user in this file is encrypted using the 
user's private password. The data of each file in the backup set is stored in an 
encrypted form in the backup data file, where the encryption key is based on a 
fingerprint of the file's data itself. These "encryption" fingerprints themselves are then 
stored in a section of the backup directory file, which is itself encrypted with a key that is 
accessible to the user only by supplying a password (Col. 26, line 66-Col. 27, line 6, and 
Col. 28, lines 35-65). As shown in FIG. 1 , the nodes to be backed up may be 
workstations 102, desktop personal computers 103, laptop computers 104, or other 
servers 105 on the network. As shown in FIG. 2, each node is assigned two directories, 
a user directory and a system directory, on the backup storage means 101 . The node 
has network write access to its user directory, where it posts backup data (Col. 7, lines 
8-58), Thus, when a node backups or updates its files into the backup storage, the 
combination of password and fingerprint as a challenge to inquiry a file for detecting a 
match before writing, such as updating or deleting an exist file. By using such 
challenging, obviously, the password is to determine if user has a right to have the full 
data item for manipulating. Otherwise, the request for the data is rejected. 
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Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject nnatter sought to be patented and 
the prior art are such that the subject nnatter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e). (f) or (g) 
prior art under 35 U.S.C. 103(a). 

4. Claims 1-7, 9-17, 19, 54-56, 60-61 and 154-156 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Wong et al. [USP 6,557,102 B1] In view 
of Brady et al. [USP 5,914,938]. 

Regarding to claim 1 , Wong teaches a method for storing image datasets 
received from a plurality of image acquisition computers, and displaying requested 
image datasets retrieved from the image archive server to a plurality of display stations. 
As shown in FIG. 3. in step 36, the image dataset \d +U is received from the digital 
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imaging source 14, and in step 42, the image data is modified in a form suitable for 
archiving in PACS image data store 28. In steps 44, 46, and 48 a hash H as digital 
fingerprint is computed from the modified image data, an identifier ID is formed from 
pertinent portions of the identifying information extracted from the modified image 
header, and the hash/identifier pair are sent to the authentication server (Col. 5, lines 
29-59, Col. 1, line 62-Col. 2. line 8). As seen, a hash H as digital fingerprint is computed 
for the image data as the data item by using a hash function as a reproducible 
pseudorandom process. The well-known hash function provides a varying or 
pseudorandom distribution of outputs for a varying sample of inputs by default. In short, 
the Wong technique as discussed performs the step of determining a digital fingerprint 
from the data item using a reproducible pseudorandom process that produces digital 
fingerprints having a pseudorandom distribution, Wong further discloses the image data is 
stored at image data store 28 (FIG. 1, Col. 3, line 35-Col, 4, line 16). As seen, the image 
data is stored at image data store as the data repository, and obviously, at an address in 
the data store as a physical location, Wong does not explicitly teach the pseudorandom 
distribution of the digital fingerprints introduces pseudorandomness into the physical 
location, Brady teaches a method of search key using a universal hashing process. 
Instead of keeping the data in an orderly pattern, a universal hash function or 
pseudorandom function is used to generate a bucket ID for addressing a table stored in a 
computer readable medium by staggering records throughout a storage space. (Brady, 
Abstract and Col. 2, lines 16-25). As seen, the pseudorandom distribution of buokeX ID or 
digital fingerprint by using the universal hash function as taught by Brady is to introduce 



Application/Control Number: 09/785,535 Page 6 

Art Unit: 2172 

pseudorandomness into the physical location. Therefore, it would have been obvious for 
one of ordinary skill in the art at the time the invention was made to modify the Wong 
technique by using digital fingerprint as an address for storing data as taught by Brady 
in order to speed up the retrieval or searching of a data item. 

Regarding to claim 2, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , Wong further discloses the step of testing for whether a data item 
is already stored in the repository by comparing a digital fingerprint of the data item to digital 
fingerprints of data items already in storage in the repository (Col. 4, lines 60-65). 

Regarding to claim 3. Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, Wong further discloses the step of the same digital fingerprint is 
used for storing the data item in the data repository and for testing whether a data item is 
already stored in the repository (Col. 5, lines 49-59). 

Regarding to claim 4, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , Wong further discloses the encrypting of the data item is 
performed by the client prior to transmitting the data item to the data repository (FIG. 3). 

Regarding to claim 5, Wong. and Brady teaches all the claimed subject matters 
as discussed in claim 4, Wong further discloses the step of encrypting the key and storing 
the encrypted key 1). 
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Regarding to claim 6, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 5, Wong further discloses a client or user specific key is used to 
encrypt the key derived from the content of the data item (Col. 5, lines 1-28). 

Regarding to claim 7, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 54, Wong further discloses the key derived from the content of the 
data item is the same for all instances of the data item stored in the repository (Col. 5, lines 1 - 
28). 

Regarding to claim 9. Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, Wong further discloses one or more additional copies or other 
forms of redundant information about the data items is stored in the data repository for data 
integrity, availability, or accessibility purposes and not to provide separate storage of the data 
item for different client programs (FIG. 1 ). 

Regarding to claim 10, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , Wong further discloses the step of associating the data item with 
each of a plurality of access-authorization credentials, each of which is uniquely associated 
with a particular user or client program (Col. 5, lines 49-59). 
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Regarding to claim 1 1 , Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, Wong further discloses the step of associating the data item with 
each of a plurality of access-authorization credentials, each of which is uniquely associated 
with a particular user or client program (Col. 5, lines 49-59). 

Regarding to claim 12, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 0, Wong further discloses the step of storing a plurality of named 
objects, each named object comprising information representative of the data item paired with 
information representative of one of the access-authorization credentials (Col. 5, lines 49- 
59). 

Regarding to claim 13, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 2, Wong further discloses the information representative of the data 
item is a digital fingerprint (Col. 5, lines 49-59). 

Regarding to claim 14, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 2, Wong further discloses the information representative of the 
access authorization credential is a cryptographic hash of all or part of the 
access-authorization credential (Col. 5, lines 49-59). 

Regarding to claim 15, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 14, Wong further discloses the cryptographic hash is an access 
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identifier that uniquely identifies the data item for a particular user or client program (FIG. 6, 
Col. 6, lines 23-35). 

Regarding to claim 16, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 12, Wong further discloses the named object is a data structure 
created by the client program (Col. 5, lines 49-59). 

Regarding to claim 17, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 12, Wong further discloses the named object is a data structure 
created by a server program acting on behalf of the repository (Col. 6, lines 1 0-21 ). 

Regarding to claim 19, Wong and Brady teaches all the claimed subject matters 
as discussed In claim 12, Wong further discloses a client retrieving a data item by 
accessing a named object using an access-authorization credential to select the named object^ 
and using the contents of the named object to determine the location of the data item in the 
data repository (Col. 4, lines 40-65, Col. 6, lines 22-64). 

Regarding to claim 54, Wong and Brady teaches all the claimed subject matters 
as discussed In claim 12, Wong further discloses a data item is represented as a 
composite of data-items, and the component data-items are separately deposited in the 
repository {F\G, 1, Cols. 3-4). 
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Regarding to claim 55, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 54, Wong further discloses lists of fingerprints for data-items 
making up a composite data-item are deposited as an index data item^ which can be given an 
object-name and used for obtaining access to any of the component data-items (Col. 6, lines 
10-35). 

Regarding to claim 56, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 55, Wong further discloses a proof-of-deposit is returned for each 
component deposit^ and some or all of the proofs are presented when the index data item is 
given an object-name (Col. 6, lines 10-35). 

Regarding to claim 60, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 15, Wong further discloses the physical location at which 
information about named-objects is stored is based on access identifiers^ to introduce 
reproducible pseudorandomness into the physical locations of the items (Col. 6, lines 10-65), 

Regarding to claim 61 , Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , Wong further discloses the data repository comprises a plurality of 
storage devices (Wong, FIG. 1 ), and Brady disclosed the pseudorandom distribution of the 
digital fingerprints introduces pseudorandomness into which storage device the data items as 
stored on (Brady. Abstract and Col. 2, lines 16-25). 
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Regarding to claim 154, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , Wong further discloses the step of encrypting the data item using 
a key derived form the content of the data item (Col. 5, lines 1 -28). 

Regarding to claim 155, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, Wong further discloses the step of encrypting the data item using 
a key derived form the content of the data item (Col. 5, lines 1 -28). 

Regarding to claim 156, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, but does not explicitly disclose the data items are widely 
circulated non-electronic media such as books or music, and the method further comprises 
converting the widely circulated non-electronic media to a standardized electronic version; 
storing the standardized electronic version as a data item in the repository; promoting the 
availability of the standardized electronic version to users with the right to have access, 
whereby the likelihood of the data repository storing multiple, slightly-different electronic 
versions of the non-electronic media is reduced. However, the technique of promoting the 
electronic data item to user with the right to have access is taught by Wong and Brady 
as discussed in claims 1 and 2. A non-electronic media such as books could be 
converted to a standardized electronic version by using a conventional method such as 
directly typing or scanning and saving the data in a repository under word perfect for 
example in order to standardized the file, obviously, will reduce the likelihood of different 
version. Therefore, it would have been obvious for one of ordinary skill in the art at the 
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time the invention was made to modify the Wong and Brady technique by converting a 
non-electric media to a standardized electronic version in order to reduce the storage 
space of book in paper version. 

5. Claim 8 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Wong et al. [USP 6,557,102 B1] in view of Brady et ai [USP 5,914,938] and Pond et 
al.[USP 4,864,616]. 

Regarding to claim 8, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 54, but fails to disclose users of the method are grouped into 
families^ and the key derived from the content of the data item is the same for all instances of 
the data item stored in the repository by users in the same family^ but may be different for 
users in different families. Pond teaches a method of cryptographically labeling 
electronically stored data and further discloses users of the method are grouped into 
families, and the key derived from the content of the data item is the same for all instances of 
the data item stored in the repository by users in the same family, but may be different for 
users in different families (Summary, Col. 2-4). Therefore, it would have been obvious for 
one of ordinary skill in the art at the time the invention was made to modify the Wong 
method by grouping the users into families and using the same key for users in the 
same family as taught by Pond in order to control access to the image data. 
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6. Claims 18, 20-30, 32-39, 47-48, 50-53, 57-58 and 157-159 are rejected 
under 35 U.S.C. 103(a) as being unpatentable over Wong et al. [USP 6,557,102 B1] 
in view of Brady et al. [USP 5,914,938] and Whiting et al. [USP 5,778,395], 

Regarding to claim 18. Wong and Brady teaches all the claimed subject matters 
as discussed in claim 12, but fails to disclose a client replacing an existing version of a 
named object with a new version of that named object^ by replacing the existing association 
with a data item stored in the data repository with a new association. Whiting teaches a 
method for backing up files, Whiting further discloses the differences between a file and 
its version in the previous backup may be computed so that only the changes to the file 
need to be written on the backup storage means (Whiting, Col, 5, lines 3-26). Therefore, 
it would have been obvious for one of ordinary skill in the art at the time the invention 
was made to modify the Wong and Brady method by including the step of replacing an 
existing version by replacing the association with a data item in order to back up file to a 
backup storage means. 

Regarding to claim 20, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 2, but fails to teach the named objects further comprise version 
information associating different data items with different versions of the named object. 
Whiting teaches a method for backing up files. Whiting further discloses the named 
objects further comprise version information associating different data items with different 
versions of the named object (Whiting, Col. 9. line 56-Col. 10, line 65). Therefore, it would 
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have been obvious for one of ordinary skill in the art at the time the invention was made 
to modify the Wong and Brady method by including the technique of version information 
in order to differentiate image datasets. 

Regarding to claim 21 , Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 20, Whiting further discloses a backup of data items stored 
in the data repository is accomplished by preserving copies of the current versions of named 
objects in existence at the time of the backup (Whiting, Col. 7, line 59-Col. 8, line 20). 

Regarding to claim 22, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 , but fails to teach records are kept of the association between data 
items and names in order to define named objects^ and wherein data items recorded as being 
associated with named objects are not: deleted from the repository, and wherein named objects 
are backed up by preserving copies of the named object records in existence at the time of the 
backup. Whiting teaches a method for backing up files, Whiting further discloses records 
are kept of the association between data items and names in order to define named objects, 
and wherein data items recorded as being associated with named objects are not deleted from 
the repository, and wherein named objects are backed up by preserving copies of the named 
object records in existence at the time of the backup (Whiting, Col. 7, line 59-CoL 8, line 20). 
Therefore, it would have been obvious for one of ordinary skill in the art at the time the 
invention was made to modify the Wong and Brady method by using the technique of 
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defining named objects and preserving copies of the named objects in order to back up 
image datasets. 

Regarding to claim 23, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 22, Whiting further discloses a plurality of backups are 
made at spaced time intervals (Whiting, Col. 1 , lines 30-50). 

Regarding to claim 24, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 22, Whiting further discloses the backup is accomplished by 
declaring that after a prescribed moment in time a new version of each named object will be 
created the first time that a new data item is associated with it (Whiting, CoL 7, line 59-Col. 
8, line 20). 

Regarding to claim 25, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 24, Whiting further discloses the prescribed moment in time 
is determined separately for each named object (Whiting, Col. 7, line 59-Col. 8, line 20). 

Regarding to claim 26, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 22, Whiting further discloses named objects are preserved 
by creating a new version of each named object each time that a new data item is associated 
with it (Whiting, Col. 8, lines 21-40). 
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Regarding to claim 27, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 26, Whiting further discloses versions of named objects that 
are deemed unnecessary are deleted (Whiting, Cel. 25, lines 9-39). 

Regarding to claim 28, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 27, Whiting further discloses the determination of which 
versions of a named object to delete is based in whole or in part on the times at which the 
versions were created, and the intervals between these times (Whiting, Col. 25, lines 9-39). 

Regarding to claim 29. Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 20, Whiting further discloses the step oi preparing a digital 
time stamp of a plurality of named objects to allow a property of these named objects to be 
proven at a later date (Whiting, Col. 12, lines 38-48). 

Regarding to claim 30, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 29. Whiting further discloses a random or other difficult to 
guess element is incorporated into the time stamp hash for each named object, to prevent the 
property form being proven if this element is deleted (Whiting, Col. 28, line 35-CoL 29, line 
9). 

Regarding to claim 32. Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 2, but fails to disclose the step of altering one or more properties 
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or parameters associated with an access-authorization credential to change the access rights 
of a client or user to the data item referenced by that credential. Whiting teaches a method 
for backing up files, Whiting further discloses the step of altering one or more properties or 
parameters associated with an access-authorization credential to change the access rights of a 
client or user to the data item referenced by that credential (Whiting, Col. 7, lines 32-58). 
Therefore, it vyould have been obvious for one of ordinary skill in the art at the time the 
invention was made to modify the Wong and Brady method by including the step of 
altering one or more properties to change the access right in order to control access to 
the image dataset. 

Regarding to claim 33, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, but fails to disclose a challenge step to ascertain that the client has 
the full data item. Whiting teaches a method for backing up files. Whiting further 
discloses a challenge step to ascertain that the client has the full data item (Whiting, Col. 35, 
lines 8-63). Therefore, it would have been obvious for one of ordinary skill in the art at 
the time the invention was made to modify the Wong and Brady method by including a 
challenge step as taught by Whiting in order to control access to image dataset. 

Regarding to claim 34. Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 33, Whiting further discloses the step of requiring that the 
client attempting to store a data item provide correct answers to inquiries as to the content of 
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portions of the data item, or inquiries that require knowledge of this content (Whiting, Col. 

35, line 64-Col. 36, line 4). 

Regarding to claim 35, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 34, Whiting further discloses the data item content on which 
the challenge is based is selected with a degree of randomness (Whiting, Col. 35, line 64-Col. 

36, line 4). 

Regarding to claim 36, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, but fails to disclose depositors use the client to stored data items in 
the repository, and at least some depositors are required to provide identification. Whiting 
teaches a method for backing up files, Whiting further discloses depositors use the client 
to stored data items in the repository, and at least some depositors are required to provide 
identification (Whiting, Col. 35, lines 7-43). Therefore, it would have been obvious for 
one of ordinary skill in the art at the time the invention was made to modify the Wong 
and Brady method by including the requiring identification of depositors to store data 
items in order to control access to image dataset. 

Regarding to claim 37, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 36, Whiting further discloses rules for when a depositor 
must provide identification are selected in order to discourage unlawful distribution of access 
to the data item (Whiting, Col. 35, lines 7-43). 
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Regarding to claim 38, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 37, Whiting further discloses there is a greater degree of 
user identification or a higher likelihood that user identification will be required when the 
data item being stored by the depositor has been indicated to be shareable with other users 
(Whiting, Col. 28, line 35-Col. 29, line 10). 

Regarding to claim 39, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 37, Whiting further discloses a class of data items the items 
may only be shared if the depositor has provided adequate identification (Whiting, Col. 28, 
line 35-Col. 29, line 10). 

Regarding to claim 47, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, but fails to disclose: the client has a directory structure for the 
data items, the data items are stored in the repository, and the directory structure is not evident 
to the repository maintainers. Whiting teaches a method for backing up files. Whiting 
further discloses: the client has a directory structure for the data items, the data items are 
stored in the repository, and the directory structure is not evident to the repository maintainers 
(Whiting, Col. 4, lines 19-45). Therefore, it would have been obvious for one of ordinary 
skill in the art at the time the invention was made to modify the Wong and Brady method 
by including a directory structure for data items in order to back up image dataset. 
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Regarding to claim 48, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, but fails to disclose the client program using the repository is a 
mirroring program which determines which data items to deposit in the repository, and 
wherein that determination is based at least in part on the result of a comparison of digital 
fingerprints establishing that certain data items are not in the repository. Whiting teaches a 
method for backing up files, Whiting further discloses the client program using the 
repository is a mirroring program which determines which data items to deposit in the 
repository, and wherein that determination is based at least in part on the result of a 
comparison of digital fingerprints establishing that certain data items are not in the repository 
(Whiting, Col. 7, line 59-Col. 9, line 10). Therefore, it would have been obvious for one 
of ordinary skill in the art at the time the invention was made to modify the Wong and 
Brady method by including the step of determining which data items to deposit in the 
repository based on at least in part on the result of a comparison in order to back up 
image dataset. 

Regarding to claim 50, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 48, Whiting further discloses the default for deciding what 
data items to mirror is to mirror all or substantially all data items (Whiting, Gol. 7, line 59- 
Col. 8, line 40). 

Regarding to claim 51, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 48, Whiting further discloses the step making a 
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determination of which data items need to be transmitted to the repository, and wherein that 
determination is based primarily on a comparison of digital fingerprints for data items at the 
client and data items in the repository (Whiting, Col. 18, line 66-Col. 19, line 53). 

Regarding to claim 52, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 10, but fails to disclose the access -authorization credential is 
determined in part by computing a hash involving elements of the pathname for a file on the 
client computer. Whiting teaches a method for backing up files. Whiting further discloses 
the access -authorization credential is determined in part by computing a hash involving 
elements of the pathname for a file on the client computer (Whiting, CoL 1 5, line 58-Col. 1 6, 
line 1 7). Therefore, it would have been obvious for one of ordinary skill in the art at the 
time the invention was made to modify the Wong and Brady method by using the 
technique of computing a hash involving the pathname in order to back up image 
dataset. 

Regarding to claim 53, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 52, Whiting further discloses the path name hash is made 
unique to a client by introducing a reproducible but randomly chosen element into it (Whiting, 
Col. 15, lines 58-Col. 16, line 17). 

Regarding to claim 57, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 56, but fails to disclose when transmitting a composite data-item, the 
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client uses fingerprints to avoid retransmitting components following loss of communication. 
Whiting teaches a method for backing up files. Whiting further discloses when 
transmitting a composite data-item, the client uses fingerprints to avoid retransmitting 
components following loss of communication (Whiting, Col. 5, lines 3-34). Therefore, it 
would have been obvious for one of ordinary skill in the art at the time the invention was 
made to modify the Wong and Brady method by using fingerprint to avoid retransmitting 
in order to reduce the network bandwidth. 

Regarding to claim 58, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 57, Wong further discloses the index data-item is encrypted 
with a key that is only made available to the repository at the moment of access (Wong, Col. 
6, lines 10-64). 

Regarding to claim 157, Wong, Brady and Whiting teaches all the claimed 
subject matters as discussed in claim 48, Wong further discloses a mirroring capability 
for a personal computer, and mirroring software with instructions for carrying out the 
aforesaid steps is preconfigured on the personal computer upon purchase (Wong, Col. 3, 
lines 35-63). 

Regarding to claim 158, Wong, Brady and Whiting teaches all the claimed 
subject matters as discussed in claim 48, Wong further discloses a mirroring capability 
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for a personal computer, and mirroring software for carrying out the method is initially 
configured to mirror essentially all data on the user's computer (Wong, Col. 3, lines 35-63). 

Regarding to claim 159, Wong, Brady and Whiting teaches all the claimed 
subject matters as discussed in claim 48, but does not explicitly teach a mirroring 
capability for a wireless network device. However, a wireless network device such as a 
computer is well known in the art. Therefore, it would have been obvious for one of 
ordinary skill in the art at the time the invention was made to modify the Wong, Brady 
and Whiting technique by including a wireless network device in order to back up data 
from a wireless node. 

7. Claim 31 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 5,914,938] and 
Garthwaite et al. [USP 6,415,302 B1]. 

Regarding to claim 31 , Wong and Brady teaches all the claimed subject matters 
as discussed in claim 1 2, but fails to disclose the step of determining that a data item 
stored in the data repository is not referenced by any named object, and reusing the storage 
space used to store the unreferenced data item, Garthmaite teaches a garbage collection 
method by determining that a data item stored in the data repository is not referenced by any 
named object, and reusing the storage space used to store the unreferenced data item 
(Garthmaite, Col. 5, line 14-Col. 6, line 8). Therefore, it would have been obvious for 
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one of ordinary skill in the art at the time the invention was made to modify the Wong 
and Brady method by using the garbage collection method as taught by Garthmaite in 
order to free unused memory. 

8. Claims 40-42 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 
5,914,9381, Whiting et al. [USP 5,778,395] and Ho [USP 6,148,342]. 

Regarding to claim 40, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 38, but fails to disclose identity information about the 
depositor is made available to anyone able to access the data item, to discourage unlawful 
sharing. Ho teaches a method for managing sensitive data and further discloses identity 
information about the depositor is made available to anyone able to access the data item. 
Therefore, it would have been obvious for one of ordinary skill in the art at the time the 
invention was made to modify the Wong, Brady and Whiting method by including the 
step of disclosing the identity information to discourage unlawful sharing in order to 
prevent unauthorized access to image dataset. 

Regarding to claim 41 , Wong, Brady, Whiting, and Ho teaches all the claimed 
subject matters as discussed in claim 40, Whiting further discloses the identity 
information is stored in an encrypted form that the depositor and users subsequently accessing 
the shared data item can both read (Whiting, Col. 28, lines 36-65). 
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Regarding to claim 42, Wong, Brady. Whiting, and Ho teaches all the claimed 
subject matters as discussed in claim 41 , Whiting further discloses the repository is not 
able to decrypt the identity information about the depositor (Whiting. Col. 29, lines 10-21 ). 

9. Claims 43-46 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 
5,914,938], Whiting et al. [USP 5,778,395] and Deo [USP 5,594,227]. 

Regarding to claim 43, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 37, but fails to disclose the identity of some users has not 
been well verified, but restrictions are placed on sharing of data item deposited by such poorly 
verified users. Deo teaches a method for protecting against unauthorized access of data 
contents by denying access to data contents on a smart card (Deo, FIG. 7) as the 
identity of some users has not been well verified, but restrictions are placed on sharing of data 
item deposited by such poorly verified users. Therefore, it would have been obvious for one 
of ordinary skill in the art at the time the invention was made to modify the Wong, Brady 
and Whiting method by using the technique of placing restriction on data deposited by 
poorly verified users in order to control access to image dataset. 
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Regarding to claim 44, Wong. Brady, Whiting and Deo teaches all the claimed 
subject matters as discussed in claim 43, Deo further discloses the step of limiting 
access to data items deposited by a poorly verified user (Deo, FIG. 7). 

Regarding to claim 45, Wong, Brady, Whiting and Deo teaches all the claimed 
subject matters as discussed in claim 44, Deo further discloses the limited access is 
provided by limiting the aggregate bandwidth provided for such accesses (Deo, FIG. 7). 

Regarding to claim 46. Wong, Brady, Whiting and Deo teaches all the claimed 
subject matters as discussed in claim 44. Deo further discloses the limited access is 
provided by limiting the number of simultaneous accesses to the data items (Deo, FIG. 7). 

10. Claim 49 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 5,914,938], 
Whiting et al. [USP 5J78,395] and Dobbek [USP 6,308,325 81]. 

Regarding to claim 49, Wong, Brady and Whiting teaches all the claimed subject 
matters as discussed in claim 48, but fails to disclose mirroring software is downloaded to 
the client using a bootstrap process, wherein a small bootstrap program is downloaded and 
executed, and the bootstrap program manages download and installation of the remainder of 
the mirroring software, Dobbek teaches a method for downloading data, Dobbek further 
discloses software is downloaded to the client using a bootstrap process, wherein a small 
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bootstrap program is downloaded and executed, and the bootstrap program manages 
download and installation of the remainder of the mirroring software (Dobbek, Col. 5, line 
60-CoL 6, line 40, and Col. 2, lines 23-43). Therefore, it would have been obvious for 
one of ordinary skill in the art at the time the invention was made to modify the Wong, 
Brady and Whiting method by downloading a bootstrap process for managing 
downloading and installing the software in order to have a software to control back up 
image dataset. 

11. Claim 59 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 5,914,938] and 
Kuzma[USP 5,781,901], 

Regarding to claim 59, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 55, but fails to disclose an email message is broken up into 
component items in such a manner that the individual attachments are separate component 
data-items. Kuzma teaches a method for transmitting email attachments form a sender 
to a receiver of a network. Kuzma further discloses the email message is broken up into 
component items in such a manner that the individual attachments are separate component 
data-items (Kuzma, Col. 4, line 65-Col. 5, line 65). Therefore, it would have been obvious 
for one of ordinary skill in the art at the time the invention was made to modify the Wong 
and Brady method by using the technique of breaking an email into component items 
based on attachment in order to secure the message. 
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12. Claims 62-63 and 65 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wong et al. [USP 6,557,102 B1] in view of Brady et al. [USP 
5,914,938] and Thomlinson et al. [USP 6,532,542 81]. 

Regarding to claim 62, Wong and Brady teaches all the claimed subject matters 
as discussed in claim 2, Wong fails to disclose an access identifier is formed to provide 
proof of ownership of the data item stored in the repository^ the access identifier is formed by 
producing a one-way hash including item-identifying information chosen by the client 
program to identify the data item, and the one-way hash cannot be reversed to permit the 
repository to discover the identity of the client program or user, Thomlinson teaches a 
method to provide central storage for data items. Thomlinson further discloses an access 
identifier is formed to provide proof of ownership of the data item stored in the repository, the 
access identifier is formed by producing a one-way hash including item-identifying 
information chosen by the client program to identify the data item, and the one-way hash 
cannot be reversed to permit the repository to discover the identity of the client program or 
user (Thomlinson, Col. 10, line 43-Col. Col, 11, line 32 and Col. 7, lines 45-67). 
Therefore, it would have been obvious for one of ordinary skill in the art at the time the 
invention was made to modify the Wong and Brady method by using a one-way hash to 
produce password as access identifier in order to control access to image dataset. 
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Regarding to claim 63, Wong, Brady and Thomlinson teaches all the claimed 
subject matters as discussed in claim 62, Thomlinson further discloses the item- 
identifying information is associated with the data item on the client (Thomlinson, FIG. 3). 

Regarding to claim 65, Wong, Brady and Thomlinson teaches all the claimed 
subject matters as discussed in claim 62, Thomlinson further discloses user-identifying 
information is provided to the repository as part of the access-authorization credential 
(Thomlinson, FIG. 3). 

13. Claims 64, 66-67 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wong et al. [USP 6,557,102 B1] In view of Brady et al. [USP 
5,914,938], Thomlinson et al. [USP 6,532,542 81] and Whiting et al. [USP 
5,778,395]. 

Regarding to claim 64, Wong, Brady and Thomlinson teaches all the claimed 
subject matters as discussed in claim 63, but fails to disclose the item-identifying 
information is derived at least in part from the path name of the data item on the client. 
Whiting teaches a method for backing up files, Whiting further discloses the item- 
identifying information is derived at least in part from the path name of the data item on the 
client (Whiting, Col, 15, line 58-Col. 16, line 17). Therefore, it would have been obvious 
for one of ordinary skill in the art at the time the invention was made to modify the 
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Wong, Brady and Thomlinson method by using the technique of cx)mputing a hash 
involving the pathname in order to back up image dataset. 

Regarding to claim 66, Wong, Brady and Thomlinson teaches all the claimed 
subject matters as discussed in claim 62, but fails to disclose at least some 
access-authorization credentials can be transferred between users without the use of the 
repository. Whiting teaches a method for backing up files. Whiting further discloses at 
least some access-authorization credentials can be transferred between users without the use 
of the repository (Whiting, Col. 28, lines 35-65). Therefore, it would have been obvious 
for one of ordinary skill in the art at the time the invention was made to modify the 
Wong, Brady and Thomlinson method by using the technique of transferring access- 
authorization credentials as taught by Whiting in order to back up image dataset in a 
share file server. 

Regarding to claim 67, Wong, Brady and Thomlinson teaches all the claimed 
subject matters as discussed in claim 65, but fails to disclose at least one class of users is 
not permitted to transfer access using access-authorization credentials. Whiting teaches a 
method for backing up files, Whiting further discloses at least one class of users is not 
permitted to transfer access using access-authorization credentials (Whiting, Col. 29, lines 1- 
9). Therefore, it would have been obvious for one of ordinary skill in the art at the time 
the invention was made to modify the Wong, Brady and Thomlinson method restricting 
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one class of users for transferring access as taught by Whiting in order to protect the 
privacy of the image dataset. 

14. Claims 68, 70-82, 85-87, 89-97 and 160-168 are rejected under 35 
U.S.C. 103(a) as being unpatentable over Whiting et al. [USP 5,778,395]. 

Regarding to claim 68, Whiting teaches a method for backing up files from disk 
volumes on multiple nodes of a computer network to a common random-access backup 
storage means. In order to back up files from multiple nodes, a fingerprint is computed 
over fixed-size portions of the file contents as the step of determining a digital fingerprint 
of the data item (Col. 18, lines 36-65). Whiting further discloses, to back up a new or 
updated file, a 32-bit hash over the relevant directory entry information is used for 
comparison instead of the full directory entry, and a complete hash value over the file 
contents is compared, as well as the least significant 16-bits of the file size. If all of 
these values match, the file being backed up is considered to be a match to the file in 
the database, resulting in a false match probability (Col. 20, line 42-Col. 21 , line 18). 
This technique indicates the step of testing for whether the data item is already stored in the 
repository by comparing the digital fingerprint of the data item to the digital fingerprints of 
data items already in storage in the repository. Whiting does not explicitly teach the step of 
challenging a client that is attempting to deposit a data item already stored in the repository, to 
ascertain that the client has the full data item. However, as taught by Whiting, a User 
Account Database contains the list of user names, user directory names, user ID 
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values, as well as encryption and password keys for each user. Most of the record 
associated with each user in this file is encrypted using the user's private password. The 
data of each file in the backup set is stored in an encrypted form in the backup data file, 
where the encryption key is based on a fingerprint of the file's data itself. These 
"encryption" fingerprints themselves are then stored in a section of the backup directory 
file, which is itself encrypted with a key that is accessible to the user only by supplying a 
password (Col. 26. line 66-Col. 27. line 6, and Col. 28, lines 35-65). As shown in FIG. 1. 
the nodes to be backed up may be workstations 102. desktop personal computers 103, 
laptop computers 104, or other servers 105 on the network. As shown in FIG. 2, each 
node is assigned two directories, a user directory and a system directory, on the backup 
storage means 101 . The node has network write access to its user directory, where it 
posts backup data (Col. 7, lines 8-58). Thus, when a node backups or updates its files 
into the backup storage, the combination of password and fingerprint as a challenge to 
inquiry a file for detecting a match before writing, such as updating or deleting an exist 
file. By using such challenging, obviously, the password is to determine if user has a 
right to have the full data item for manipulating. Otherwise, the request for the data is 
rejected. Thus, the technique as discussed indicates the step of challenging a client that 
is attempting to deposit a data item already stored in the repository^ to ascertain that the client 
has the full data item. It would have been obvious for one of ordinary skill in the art at the 
time the invention was made to modify the Whiting method by including the step of 
challenging a client to ascertain the client has the full data item in order to backup a file 
into the backup storage. 



Application/Control Number: 09/785.535 
Art Unit: 2172 



Page 33 



Regarding to claim 70, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses the step of requiring that the client 
provide correct answers to inquiries as to the content of portions of the data item, or inquiries 
that require knowledge of this content (Whiting, Col. 35, line 64-Col. 36, line 4). 

Regarding to claim 71 , Whiting teaches all the claimed subject matters as 
discussed in claim 70, Whiting further discloses the challenge is based is not easily 
predicted by the user or client program (Col. 26, line 66-Col. 27, line 6. and Col. 28, lines 
35-65). 

Regarding to claim 72, Whiting teaches all the claimed subject matters as 
discussed in claim 70, Whiting further discloses the data item content on which the 
challenge is based can be determined by the client program without the aid of the repository 
(Col. 26, line 66-Col. 27. line 6. and Col. 28, lines 35-65). 

Regarding to claim 73, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses future access to the data item deposited is 
provided by creating an access-authorization credential which can be presented at a later time 
to prove that the challenge has been met for that data item (Col. 26, line 66-Col. 27, line 6, 
and Col. 28, lines 35-65). 



Application/Control Number: 09/785.535 Page 34 

Art Unit: 2172 

Regarding to claim 74, Whiting teaches all the claimed subject matters as 
discussed in claim 73. Whiting further discloses each access authorization credential is 
uniquely associated with a access owner (Col. 26. line 66-Col. 27, line 6, and Col. 28, lines 
35-65). 

Regarding to claim 75. Whiting teaches all the claimed subject matters as 
discussed in claim 73. Whiting further discloses each access authorization credential 
includes information sufficient to identify the access owner (Col. 26, line 66-Col. 27. line 6, 
and Col. 28, lines 35-65). 

Regarding to claim 76, Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting further discloses the access authorization credential 
includes a fingerprint (CoL 26, line 66-Col. 27. line 6, and Col. 28. lines 35-65). 

Regarding to claim 77, Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting further discloses the access authorization credential is 
associated with a fingerprint in the repository (Col. 26, line 66-Col. 27. line 6; Col. 28. lines 
35-65; Col. 20, line 42-Col. 21. line 18). 

Regarding to claim 78. Whiting teaches all the claimed subject matters as 
discussed in claim 76, Whiting further discloses the fingerprint is different from the 
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fingerprint used for testing whether the data item is already stored in the repository (Col. 20, 
line 42-Col. 21Jine18). 

Regarding to claim 79, Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting further discloses the access authorization credential is 
associated directly with the data-item or with a record in the repository that is associated with 
the data-item (Col. 20. line 42-Col. 21. line 18). 

Regarding to claim 80. Whiting teaches all the claimed subject matters as 
discussed in claim 79. Whiting further discloses the record in the repository with which the 
access authorization credential is associated is an access identifier that is associated with the 
credential by computation of a one way hash function (Col. 18, line 36-Col. 19. line 53). 

Regarding to claim 81 , Whiting teaches all the claimed subject matters as 
discussed in claim 80, Whiting further discloses the access identifier is stored in the 
repository and is compared with a later hash of an access authorization credential to verify 
access permission to a named object (Col. 20. line 42-Col. 21 , line 18). 

Regarding to claim 82, Whiting teaches all the claimed subject matters as 
discussed in claim 73. Whiting further discloses the access authorization credential may 
include information sufficient to respond to a challenge (Col. 26. line 66-Col. 27, line 6. and 
Col. 28. lines 35-65). 
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Regarding to claim 85. Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting further discloses at least some access-authorization 
credentials can be transferred between users without the aid of the repository (Col. 28, lines 
35-65). 

Regarding to claim 86, Whiting teaches all the claimed subject matters as 
discussed in claim 85, Whiting further discloses at least some access-authorization 
credentials is restricted for at least one class of access owner (Col. 29, lines 1 -9). 

Regarding to claim 87, Whiting teaches all the claimed subject matters as 
discussed in claim 86, Whiting further discloses the access authorization credential is only 
usable by the access owner (Col. 26, line 66-Col. 27, line 6, and Col. 28, lines 35-65). 

Regarding to claim 89, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses at the time of deposit at least some data 
items are associated with a minimum expiration time (Col. 7, line 59-Col. 8, line 20). 

Regarding to claim 90, Whiting teaches all the claimed subject matters as 
discussed in claim 89, Whiting further discloses at least some data items that expire are 
removed and their storage space reused (Col. 25, lines 9-39). 
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Regarding to claim 91 . Whiting teaches all the claimed subject matters as 
discussed in claim 90. Whiting further discloses the repository keeps track of which access 
owners have deposited a given data item (FIG. 2, Col. 7, lines 32-58). 

Regarding to claim 92, Whiting teaches all the claimed subject matters as 
discussed in claim 91 , Whiting further discloses upon an access owner informing the 
repository that a data item is no longer needed^ the data item is deleted or the expiration of the 
data item is accelerated (CoL 7, line 59-CoL 8, line 20, Col. 25. lines 9-39). 

Regarding to claim 93, Whiting teaches all the claimed subject matters as 
discussed in claim 92, Whiting further discloses the repository truncates the list of 
depositors associated with a data-item^ and never accelerates the expiration of this data item 
(Col. 7, line 59-Col. 8, line 20; Col. 26, line 66-Col. 27, line 6. and Col. 28. lines 35-65). 

Regarding to claim 94, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses the step of encrypting the data item using 
a key derived from the content of the data item (Col. 26. line 66-Col. 27, line 6, and Col. 28, 
lines 35-65). 

Regarding to claim 95. Whiting teaches all the claimed subject matters as 
discussed in claim 94, Whiting further discloses the encrypting of the data items is 
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performed by the client prior to transmitting the data item to the storage device (Col. 7, line 
59-CoL 8, line 20). 

Regarding to claim 96, Whiting teaches all the claimed subject matters as 
discussed in claim 94, Whiting further discloses the step of encrypting the key and storing 
the encrypted key on the storage device or on another storage device connected to the network 
(Col. 12, line38-Col.13, Iine4). 

Regarding to claim 97, Whiting teaches all the claimed subject matters as 
discussed in claim 96, Whiting further discloses a client or user specific key is used to 
encrypt the key derived from the content of the data item (Col. 26, line 66-Col. 27, line 6, 
and Col. 28, lines 35-65). 

Regarding to claim 160, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses records are kept of the association between 
data items and names in order to define named objects^ and wherein data items recorded as 
being associated with named objects are not deleted from the repository^ and wherein named 
objects are backed up by preserving copies of the named object records in existence at the time 
of the backup (Col. 7, line 59-Col. 8, line 20). 

Regarding to claim 161, Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses a backup of data items stored on the 
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storage device is accomplished by preserving, copies of the current versions of named objects 
in existence at the time of the backup (Col. 7, line 59-Col. 8, line 20). 

Regarding to claim 162. Whiting teaches all the claimed subject matters as 
discussed in claim 68, Whiting further discloses depositors use the client to store data items 
in the repository, and at least some depositors are required to provide identification (Col. 35, 
lines 7-43). 

Regarding to claim 163, Whiting teaches all the claimed subject matters as 
discussed in claim 162, Whiting further discloses rules for when a depositor must provide 
identification are selected in order to discourage unlawful distribution of access to the data 
item (Col. 35, lines 7-43). 

Regarding to claim 164, Whiting teaches all the claimed subject matters as 
discussed in claim 163, Whiting further discloses there is a greater degree of user 
identification or a higher likelihood that user identification will be required when the data 
item being stored by the depositor has been indicated to be shareable with other users (Col. 
28, line 35-Col. 29, line 10). 

Regarding to claim 165, Whiting teaches all the claimed subject matters as 
discussed in claim 1 63, Whiting further discloses for a class of data items the items may 
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only be shared if the depositor has provided adequate identification (Col. 28, line 35-Col. 29, 
line 10). 

Regarding to claim 166, Whiting teaches all the claimed subject matters as 
discussed in claim 164, Whiting further discloses identity information about the depositor 
is made available to anyone able to access the data item, to discourage unlawful sharing (Col. 
35. lines 7-43). 

Regarding to claim 167, Whiting teaches all the claimed subject matters as 
discussed in claim 166, Whiting further discloses the identity information is stored in an 
encrypted form that the depositor and users subsequently accessing the shared data item can 
both read (Col. 28. lines 36-65). 

Regarding to claim 168, Whiting teaches all the claimed subject matters as 
discussed in claim 167, Whiting further discloses the repository is notable to decrypt the 
identity information about the depositor (Col. 29. lines 10-21). 

Regarding to claim 173, Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting further discloses the access-authorization credential is 
determined in part by computing a hash involving elements of the pathname for a file on the 
client computer {Co\, 15. line 58-Col. 16. line 17). 
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Regarding to claim 174, Whiting teaches all the claimed subject matters as 
discussed in claim 173, Whiting further discloses the path name hash is made unique to a 
client by introducing a reproducible but randomly chosen element into it (Col. 1 5, line 58- 
Col. 16, line 17). 



15. Claims 69 and 83-84 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Whiting et al. [USP 5,778,395] in view of Armangau et al. [USP 
6,549,992 B1]. 

Regarding to claim 69, Whiting teaches all the claimed subject matters as 
discussed in claim 68, but fails to disclose: the repository gives the client a deposit receipt 
which allows the user to prove that the deposit occurred. Armangau teaches a method of 
backing up data from primary storage to tape; Armangau further discloses the repository 
gives the client a deposit receipt which allows the user to prove that the deposit occurred 
(Armangau, Col. 17, lines 6-28). Therefore, it would have been obvious for one of 
ordinary skill in the art at the time the invention was made to modify the Whiting method 
by using the step of giving the receipt of backup data as taught by Armangau in order to 
confirm the transfer of backup data from a node to the backup storage. 

Regarding to claim 83, Whiting teaches all the claimed subject matters as 
discussed in claim 73, Whiting fails to teach data proof information created during a 
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challenge process that is sufficient to prove to the repository that the challenge was passed, 
Armangau teaches a method of backing up data from primary storage to tape; 
Armangau further discloses data proof information created during a challenge process that 
is sufficient to prove to the repository that the challenge was passed (Armangau, Col. 1 7, 
lines 6-28). Therefore, it would have been obvious for one of ordinary skill in the art at 
the time the invention was niade to modify the Whiting method by using the step of 
giving the receipt of backup data as taught by Armangau in order to confirm the transfer 
of backup data from a node to the backup storage. 

Regarding to claim 84, Whiting and Armangau teaches all the claimed subject 
matters as discussed in claim 83. Armangau further discloses the data proof information 
comprises the actual challenge response^ so that it can be directly verified against the data- 
item (Armangau, Col. 17, lines 6-28). 

16. Claim 88 is rejected under 35 U.S.C. 103(a) as being unpatentable 
over Whiting et al. [USP 5,778,395] in view of Midgley et al. [USP 6,526,418 B1]. 

Regarding to claim 88, Whiting teaches all the claimed subject matters as 
discussed in claim 86, but fails to disclose the aggregate bandwidth available to all users of 
the access authorization credential is limited, Midgley teaches a method for continuous 
back up of data stored on a computer network, Midgley further discloses the aggregate 
bandwidth available to all users of the access authorization credential is limited (Midgley, 



Application/Control Number: 09/785,535 Page 43 

Art Unit: 2172 

Col. 5, lines 21-56). Therefore, it would have been obvious for one of ordinary skill in the 
art at the time the invention was made to modify the Whiting method by using the 
technique of controlling the bandwidth as taught by Midgley in order to manage the 
bandwidth when back up data file to the backup storage. 

17. Claims 169-172 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Whiting et al. [USP 5,778,395] in view of Deo [USP 5,594,227]. 

Regarding to claim 169, Whiting teaches all the claimed subject matters as 
discussed in claim 1 64, but fails to disclose the identity of some users has not been well 
verified, but restrictions are placed on sharing of data item deposited by such poorly verified 
users. Deo teaches a method for protecting against unauthorized access of data 
contents by denying access to data contents on a smart card (Deo, FIG. 7) as the 
identity of some users has not been well verified, but restrictions are placed on sharing of data 
item deposited by such poorly verified users. Therefore, it would have been obvious for one 
of ordinary skill in the art at the time the invention was made to modify the Whiting 
method by using the technique of placing restriction on data deposited by poorly verified 
users in order to control access to image dataset. 

Regarding to claim 170, Whiting and Deo teaches all the claimed subject matters 
as discussed in claim 1 69, Deo further discloses the step of limiting access to data items 
deposited by a poorly verified user (Deo, FIG. 7). 
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Regarding to claim 171 , Whiting and Deo teaches all the claimed subject matters 
as discussed in claim 1 70, Deo further discloses the limited access is provided by limiting 
the aggregate bandwidth provided for such accesses (Deo, FIG, 7). 

Regarding to claim 172, Whiting and Deo teaches all the claimed subject matters 
as discussed in claim 1 70, Deo further discloses the limited access is provided by limiting 
the number of simultaneous accesses to the data items (Deo, FIG. 7). 

Conclusion 

18. Applicant's amendment necessitated the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE FINAL. See 
MPEP § 706.07(a). Applicant is reminded of the extension of time policy as set forth in 
37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 
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1 9. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to HUNG Q PHAM whose telephone number is 703- 
605-4242. The examiner can normally be reached on Monday-Friday, 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, JOHN E BREENE can be reached on 703-305-9790. The fax phone 
number for the organization where this application or proceeding is assigned is (703) 
872-9306. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 703-305- 



3900. 



Examiner Hung Pham 
January 8, 2004 




